CVE-2017-5483

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0

Description The issue is related to buffer overflows in tcpdump, specifically in the SNMP parser and the ISO CLNS parser. The buffer overflow in the SNMP parser is caused by improper handling in the asn1 parse() function. Similarly, the ISO CLNS parser in the clnp print() function is vulnerable due to insufficient bounds checking. This could allow a remote attacker to send an overly long argument, potentially leading to a buffer overflow, execution of arbitrary code on the system, or causing the application to crash.

Recommendations For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the SNMP and ISO CLNS parsing functions until a patch is available.